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AMENDMENTS TO THE CLAIMS 

The listing of claims replaces all prior versions, and listings, of claims in the application: 
List ing of Claims: 

I, (Currently Amended) In a computerized system that includes one or more 
wireless clients accessing a content server through a WAP server and a gateway interposed 
between the WAP server and (he content server, all of which arc part of a network, wherein 
access to the content server requires authentication credentials, the network maintaining gateway 
authentication credentials that specify one or more access privileges tailored to access through 
the gateway, ti method of authenticating a client comprising a gateway performing the acts of: 

defining an authentication filter in a gateway that is remotely interposed between 
a remote WAP server client and a content server, wherein the authentication filter maps 
authentication credentials received from the remote WAP sci-ver client according to ' 
pre-established criteria, the authentication filter including a domain identifier and a 
uscruamc modifier, wherein the WAP server provides the authentication credentials to 
the gateway in response to a wireless client requesting access to a domain available to the 
content server; 

receiving the authentication credentials at the gateway from the remote WAP 
server client, wherein the authentication credentials include both a domain-p assword and 
a user name corresponding to access permissions for accessing the resources at the 
content server through one o r more domains the domain ; 

mapping the received authentication credentials based on the pre-established 
criteria, and by changing at least one of the-ajiomain and user name of the authentica tion 
crede ntials r eceived from the remote client to different domain or user name, 
respectively, wherein the domain identifier is configured to change the domain^ and 
wherein the iisemame modifier is configured to change the user name that is received 
from the remote client by at least one of adding a suffix or prefix to the user name, 
adding new characters to a middle portion of the user name, replacing a portion of the 
user n;ime, or deleting some characters from the user name; and 
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sending the mapped authentication credentials to Ihc network, the mapped 
authenticat ion c r edent i als including the password originally provided by the WAP server 
client; am i, the a l least one changed user name or domain, and such that the wireless 
client's access to the content source is based on the mapped authentication credentials 
comprising Ihc at least one oTa changed user name and a changed domain. 

2. (Original) A method as recited in claim 1 wherein gateway authentication 
credentials and oilier authentication credentials arc maintained in separate domains, find wherein 
the act of mapping the received authentication credentials includes changing a domain name that 
is pail of the received authentication credentials. 

3. (Original) A method as recited in claim 2 wherein the act of mapping the 
received authentication credentials includes replacing the domain name that is part of the 
received authentication credentials with another domain name. 

4. (Original) A method as recited in claim 1 wherein the gateway authentication 
credentials arc maintained in a credential database that is administered separately from domain 
authentication credentials and recognized by the content server only in authenticating client 
access through the gateway. 

5. (Original) A method as recited in claim 1 wherein gateway authentication 
credentials and other authentication credentials share a common domain, and wherein the act of 
mapping Ihc received authentication credentials includes changing a usemamc that is part of the 
received authentication credentials, 

6« (Original) A method a$ recited in claim 5 wherein the act of mapping the 
received authentication credentials includes adding a suffix to the uscniame« 

' 1 ' ' . 7- . (Original) ' A method as recited in claim 5 wherein the act of mapping the 

received authentication credentials includes adding a prefix to the username. 
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8, (Original) A method as recited in claim 1 wherein the client includes one or 
more identified wireless application protocol servers providing gateway and content server 
access to one or niorc other clients, the method further comprising the act of accepting 
authentication credentials only from the one or more identified wireless application protocol 
servers. 
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9. (Original) A method as recited tti claim 1 wherein the gateway authentication 
crodcntiols correspond to other authentication credentials that allow access to a content server, 
and wherein a trust relationship exists between the gateway authentication credentials and other 
authentication credentials with respect to one or more access privileges, the method further 
comprising the acts of: 

receiving a request for content available at the content sewer; 
sending the request to !he network; 
receiving the requested content from the network; and 
sending the received content to the client. 

10. (Original) A method as recited in claim 9 wherein the content available at the 
content server comprises email content. 

IK (Original) A method as recited in claim 9 wherein the one or more access 
privileges included within the (rust relationship that exists between the gateway authentication 
credentials and the other authentication credentials comprise a delegate access permission. 
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1 2. (Currently Amended) Tn a computerized system that includes one or more mobile 
clients accessing a content server through a mobile gateway and a WAP server interposed 
between the WAP server and the content server, all of which arc part of a network, wherein 
access to the content server requires authentication credentials that may contain a combination of 
numbers, upper case letters, lower case letters, and punctuation, a^wherei^a^leaftt-safne-e^tl^e 
tnol>He-€tiento^ise-^ cr e d e ntial s-o^haye^^mpti4--syste m that i s 

tvptkni^^rHatvineri^fflptit-r- uth e r th an- for l e tt e rs or piHK^uationr-the network maintaining 
mobile authentication credentials that specify one or more access privileges tailored to mobile 
client access, a method of authenticating a mobile client comprising a mobile gateway 
performing steps for; 

filtering, at a gateway, authentication credentials that include a user Jinmo an 4-a 
do«iai«-1hat are received from a WAP server communicating with one or more remote 
mobile clients and the gateway to produce mapped authentication credentials that match 
mobile authentication credentials maintained on the network by at least one of changing 
the domain name and the user name, wherein the auth enticatio n credentials include a 
password and u ser mim e for reso ur ces at one or more domai ns of the content serve r, 
which are provi de d bv a w ireless client to ■ wh e rein the WAP serve r and from the WAP 
s erver t o-pFevid o s Iho nuth ontication credentials to the gateway in-respons o to a wirclcisu 
client-requestin^^-ees^^^d omflin available to the content sorvo F, and wherein changing 
the user name includes one of adding a suffix or prefix to the user name, adding new 
characters to a middle portion of the user name, replacing a portion of the user name, or 
deleting some characters from the user name; 

identifying a mobile client to the network using the altered authentication 
creden t i al s , incl tiding the password p rovid ed bv the wireless client and at lea st one of a 
change d doma i n or use r name; and 

accessing content provided by the network in accordance with the access 
privileges allowed by the mobile authentication credentials. 
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13. (Original) A method as recited in claim 12 wherein the slop for altering 
Authentication credentials comprises the acts of: 

defining an authentication filter that maps authentication credentials received 
from mobile clients according to pre-established criteria; and 

mapping Ihc received authentication credentials based on the pre-established 
criteria. 

14. (Original) A method as recited in claim 12 wherein the step for identifying a 
mobile client comprises the acts of: 

receiving authentication credentials from a mobile client; and 

sending mapped authentication credentials to the network, wherein the mobile 

client's access to the content source is determined from the mapped authentication' 

credentials. 

15. (Cancelled). 

1 0. (Previously Presented) A method as recited in claim 12, wherein changing 
iU least one of the domain name and a usemame includes either adding a suffix to the usemamts 
or replacing the domain name with another domain name. 

17, (Original) A method as recited in claim 12 wherein the mobile authentication 
credentials arc maintained in a credential database that is administered separately from domain 
authentication credentials and recognized by the content' server only in authenticating mobile 
clients. 

18. (Original) A method as recited in claim 12 wherein mobile authentication 
credentials and oilier authentication credentials share a common domain. 

i 
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1 9. (Original) A niclhod as recited in claim 12 wherein the mobile client includes 
one or more identified wireless application protocol servers providing mobile gateway and 
content server access to one or more other mobile clients, the step for identifying a mobile client 
comprising the act of accepting authentication credentials only from the one or more identified 
wireless application protocol servers. 

20. (Original) A method as recited in claim 12 wherein the step for accessing 
content provided by the content server comprises the acts of: 

receiving a request to access content from the mobile client; 
sending Ihe request to the network; 
receiving the requested content from the network; and 
sending the received content to the mobile client. 

21. (Original) A method as recited in claim 20 wherein the content is email 
content. 

22. (Original) A method as recited in claim 12 wherein a trust relationship exists 
between the mobile authentication credentials and other authentication credentials with respect to 
one or more access privileges. 

23. (Original) A method as recited in claim 22 wherein the one or more access 
privileges included within the trust relationship that exists between the mobile authentication 
credentials and the other authentication credentials comprise a delegate access pennission. 
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24. (Currcnlly Amended) In a computerized system that includes one or more mobile 
clients accessing a content server through a WAP server and a mobile gateway interposed 
between the WAP server and the content server , all of which are part of a network, wherein 
access to the content server requires authentication credentials that may contain a combination of 
numbers, upper case letters, lower case letters, and punctuation, an d wher e in - al least som e of the 
n^HteH»lkH>tfrH*^ cr e d e ntials or h ave- an input system tha tnis 

optimiMi^fer-^^ network maintaining 

mobile authentication credentials that specify one or more access privileges tailored to mobile 
client access 4 , a computer program product that implements a method of authenticating a mobile 
client, comprising: 

a computer readable medium for carrying machine-executable instructions for 
i implementing the method; and 

wherein said method is comprised of machine-executable instructions for a 

mobile gateway performing the acls of: 

defining an authentication filter in a gateway that is remotely interposed 
between a remoie WAP server client and a content server, wherein the 
authentication filter maps authentication credentials received from the remote 
WAP server client according to pre-established criteria, the authentication filter 
including a domain identifier and a usemame modifier, wherein the WAP server 
provides the authentication credentials to the gateway in response to a wireless 
client requesting access to a domain available to the content server, 

receiving the authentication credentials at the gateway from the remote 
WAP server client, wherein the authentication credentials include both a domain 
password and a user name corresponding to access permissions for accessing the 
resources at the content server through one or more domains lho doma to: 
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mapping Uic received authentication credentials based on the 
pre- established criteria, and by changing at least one of &e-j)_domain and user 
name of the authentication cre denti als received from the remote client to different 
domain or user name, respectively, wherein the domain identifier is configured to 
J change the domain* and wherein the username modifier is configured to change 

the user name that is received from the remote client by at least one of adding a 
suffix or prefix to the user name, adding new characters to a middle portion of the 
user name, replacing a portion of the user name, or deleting some characters from 
the user name; and 

sending the mapped authentication credentials to the network, themjjppcd 
authentication crede ntials including the password originally provided by the WA P 
server client and the at least one changed user name or domain, and such that the 
wireless client's access to the content source is based on the ! mapped 
authentication credentials comprising the at least one of a changed user name and 
a changed domain. 

25. (Original) A computer program product as recited in claim 24 wherein' mobile 
authentication credentials and other authentication credentials arc maintained in separate 
domains, and wherein the act of mapping the received authentication credentials includes 
changing a domain name that is part of the received authentication credentials. 

26. (Original) A computer program product as recited in claim 25 wherein the act 
of mnpping the received authentication credentials includes replacing the domain name that is 
part of (he received authentication credentials with another domain name. 

27. (Original) A computer program product as recited in claim 24 wherein the 
mobile authentication credentials are maintained in a credential database that is administered 
separately from domain authentication credentials and recognized by the content server only "in 
authenticating mobile clients.* [ 
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28. (Original) A computer program product as recited in claim 24 wherein mobile 
authentication credentials and other authentication credentials share a common domain, and 
whrrcin the act of mapping the received authentication credentials includes changing a username 
that is part of the received authentication credentials, 

29. (Original) A computer program product as recited in claim 28 wherein the act 
of mapping the received authentication credentials includes adding a suffix to the username. 

30. (Original) A computer program product as recited in claim 28 wherein the act 
of mapping the received authentication credentials includes adding a prefix to the usemame, 

31. (Original) A computer program product as recited in claim 24 wherein the 
mobile authentication credentials correspond to other authentication credentials that allow access 
to a conlent server, and wherein a trust relationship exists between the mobile authentication 
credentials and other authentication credentials with respect to one or more access privileges, the 
method further comprising computer-executable instructions for performing the acts of; 

receiving a request for content available at the content server; 
sending the request to the network; 
receiving the requested content from the network; and 
sending the received content to the mobile client. 

32. (Original) A computer program product as recited in claim 31 wherein the 
content available at the content server comprises email content. 

33. (Original) A computer program product as recited in claim 31 wherein the 
one or more access privileges included within the trust relationship that exists between the 
mobile authentication credentials and Die other authentication credentials comprise a delegate 
access permission., 
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34. (Original) A computer program product as recited in claim 24 wherein the 
mobile client includes one or more identified wireless application protocol servers providing 
mobile gateway and content server access to one or more other mobile clients, the method further 
comprising computer-executable instructions for performing the act of accepting authentication 
credentials only from the one or more identified wireless application protocol servers. 

35. (New) A method as recited in claim 2, wherein changing the domain includes at 
bast one of substituting one domain for another domain by replacing a domain specified by the 
mobile client; altering a domain name specified by the mobile client; or adding a domain. 

36. (New) A method as recited in claim 1, wherein the password comprises a 
numeric PIN entered by the wireless client 

37. (New) A method as recited in claim 1, wherein the password is a password 
entered by the wireless client and wherein different authentication credentials must be provided 
by the wireless client to access different resources at the content server. 
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